Title

Prohibit Network Bridge in Windows (Cat II impact)

Discussion

This check verifies the Network Bridge can not be installed and configured.

Check Content

If the following registry value doesn’t exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\Network Connections\ Value Name: NC_AllowNetBridge_NLA Type: REG_DWORD Value: 0

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> Network Connections “Prohibit installation and configuration of Network Bridge on your DNS domain network” to “Enabled”.

Additional Identifiers

Rule ID: SV-16584r1_rule

Vulnerability ID: V-15667

Group Title: Prohibit Network Bridge

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.